You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@metron.apache.org by "Justin Leet (JIRA)" <ji...@apache.org> on 2018/07/18 12:41:00 UTC

[jira] [Created] (METRON-1680) Allow Ambari to accept quoted parser groups

Justin Leet created METRON-1680:
-----------------------------------

             Summary: Allow Ambari to accept quoted parser groups
                 Key: METRON-1680
                 URL: https://issues.apache.org/jira/browse/METRON-1680
             Project: Metron
          Issue Type: Improvement
            Reporter: Justin Leet


Per discussion on https://github.com/apache/metron/pull/1099, we should allow Ambari to accept quoted parser groups in order to allow for parser aggregation (including possibly doing aggregation on a default flow).

A possible way to express this is something like
```
bro,"snort,yaf"
```
to signify
* Running Bro as its own topology
* Running Snort + Yaf as an aggregated topology.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)